Privacy Protocol & Regulatory Notice

1. Data Controller Identification

The entity responsible for the collection and processing of your personal data under global data protection laws is:

TrainQuants Technologies Ltd.
Data Protection Officer: privacy@trainquants.com
Official Domain: https://trainquants.com

2. What Personal Information We Collect

We collect and process only the minimal data necessary to deliver our services:

3. Client-Side WebAssembly Architecture & Code Privacy

Traditional coding judges execute student code on remote backend virtual machines, exposing algorithms to cloud logging and interception. TrainQuants operates on a zero-compute client-side model:

• Your Python algorithms are compiled and executed in your own browser's memory via Pyodide WebAssembly (Python 3.11 WASM).
• We do not record, transmit, or harvest candidate draft code to external servers for third-party machine learning or artificial intelligence training.
• Only high-level benchmark outputs (e.g. execution time in milliseconds, memory consumption, and unit test pass/fail results) are transmitted to record your leaderboard rank.

4. Legal Bases for Processing (GDPR Article 6)

We process personal data under the following legal grounds:

• Performance of a Contract (Art. 6(1)(b)): Providing the TrainQuants educational environment, scoring challenges, and managing your user profile.
• Legitimate Interests (Art. 6(1)(f)): Protecting our platform from bot attacks, cheating, server abuse, and improving simulation performance.
• Consent (Art. 6(1)(a)): Non-essential functional storage and analytics preferences, which can be modified or revoked at any time via Cookie Preferences.

5. CCPA/CPRA California Privacy Disclosures

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• No Sale of Data: TrainQuants has not sold, rented, or shared any consumer personal information for monetary or other commercial consideration in the preceding 12 months.
• No Cross-Context Behavioral Advertising: We do not track users across third-party websites to serve targeted behavioral advertisements.
• Right to Opt-Out: Because we do not sell or share personal data, no opt-out is required; however, you retain the right to request deletion or disclosure of any stored telemetry.

6. Your Global Data Protection Rights

Regardless of your geographic location, TrainQuants affords you the following statutory rights:

• Right of Access (Art. 15): Request a copy of all personal information we hold about you.
• Right to Rectification (Art. 16): Correct any inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request the permanent deletion of your account, email address, solved challenge telemetry, and leaderboard records.
• Right to Data Portability (Art. 20): Receive your candidate benchmark dossier in a machine-readable JSON format.
• Right to Withdraw Consent: Revoke consent for non-essential storage at any time with immediate effect.

To exercise any of these rights, email our Data Protection Officer at privacy@trainquants.com. We respond to all verified requests within thirty (30) days without fee.

7. Indian Privacy Standards • DPDP Act, 2023 & IT Rules, 2021

For users and candidates resident in the Republic of India, TrainQuants processes personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

• Data Fiduciary & Data Principal Roles: TrainQuants acts as a Data Fiduciary. Users are Data Principals entitled to notice, purpose limitation, and consent withdrawal.
• Rights of Indian Data Principals: You have the right to access a summary of personal data processed, the right to correction, completion, and erasure of personal data, and the right to nominate a representative.
• No Unlawful Processing: We do not track, profile, or target advertisements to minors.

Statutory Grievance Redressal Mechanism (India)

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, TrainQuants has designated a dedicated Grievance Officer for India:

8. Data Security & Encryption Protocols

All communications between your browser and TrainQuants are secured using Transport Layer Security (TLS 1.3) with SHA-256 RSA/ECDSA encryption. Authentication tokens are handled through Supabase Row-Level Security (RLS) policies that isolate user data at the database engine level.

9. Children's Privacy Notice

TrainQuants is directed exclusively to adults, university students, and professionals aged 18 and older. We do not knowingly solicit or collect personal data from individuals under 18 years of age.

10. Contacting Our Data Protection & Legal Office

If you have questions, concerns, or requests regarding our privacy protocols:

TrainQuants Technologies Ltd. • Privacy Office
Global Privacy: privacy@trainquants.com
India Grievances: grievance@trainquants.com
Official Domain: https://trainquants.com